Claims 

A method for performing failure recovery in a Java platform, comprising 
the operations of: 

executmg an application having a service module and a control module, wherein 
5 the control module includes application-specific polices for the application; 

reporting a detected error in a system component to a runtime executive; 

isolating the syfetem component; and 

notifying the control module of the system component failure. 

10 2. A method as recited in claim 1, wherein the system component is the 

service module. \ 

3. A method as recitech in claim 2, wherein isolating the system component 
includes disabling the service modulo. 

15 \ 

4. A method as recited in clafrn 1, wherein the system component is a Java 
server. \ 
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A method as recited in claim 4, wherein isolating the system component 
includes shopping execution of the Java server. 



6. A method as recited in claim 1, wherein the runtime executive is used to 
facilitate isolating the system component. 



7. A method performing failure recovery in a Java platform, comprising the 
operations of: 

executing an application having a service module and a control module on a first 
Java server, wherein the control module includes application-specific polices for the 
application; 

detecting an error in a system component; 

determining which modules\are affected by the detected error using the control 
module; and 

restarting the modules affected t)y the detected error on a second Java server using 
the control module. 



8. A method as recited in claim 7, further comprising the operation of 
allocating a new module for a module affected \y the detected error on the second Java 



server. 
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"^>— 9.\ A method as recited in claim 8, further comprising the operation of 
loading a st\te for the new module from a repository. 



5 10. A method as recited in claim 9, wherein the state is a state of the module 

affected by the detected error. 



0 



11. A method recited in claim 10, further comprising the operation of 
enabling routing of incoming messages to the new module. 



12. A method as recited in claim 11, further comprising the operation of 
disabling routing of incoming messages to the module affected by the error. 



13. A method as recited in claim 12, further comprising the operation of 
5 stopping execution of the module affected ay the error. 



14. A system for performing failure recovery in a Java platform, comprising: 

an application having a service module and\a control module, wherein the control 
module includes application-specific polices for the application; 
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error correlator capable of determining which system component includes a 



eported error; and 



a runtime executive in communication with the application and the error 
correlator, wherein the error correlator reports the system component having the reported 
error to the runtime executive, and wherein the runtime executive isolates the system 
component. 



15. A system as recited in claim 14, wherein the runtime executive notifies the 
control module of the systdm component failure. 



16. A system as recited in claim 15, wherein the control module determines 
which modules are affected by the detected error. 



17. A system as recited in claim 16, wherein the control module restarts the 
15 modules affected by the detected erron 



18. A system as recited in claiiA 17, wherein a new module is created for each 
module affected by the detected error. 
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lv. A system as recited in claim 18, wherein the new modules are created on a 
single neWyJava server. 



20. A system as recited in claim 18, wherein the new modules are created on 
5 multiple new Java servers. 



21. A system as recited in claim 18, further comprising a repository, wherein a 
state for each of the newVnodules is loaded from the repository. 



10 22. A system as recited in claim 21, wherein each state is a state of a module 

affected by the detected error prior to a time when the detected error occurred. 
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